In-Vehicle Network Log Monitoring for Fleet Cyberattack Response
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Connected vehicles are vulnerable to cyber-attacks through their in-vehicle networks, which can lead to vehicle malfunctions and software tampering, necessitating effective security measures beyond individual vehicle detection.
Innovation Solution
A vehicle security monitoring apparatus that analyzes log data from in-vehicle networks to detect abnormal states, estimate the range of influence, and transmit targeted response instructions to affected vehicles, utilizing a SOC server to manage and coordinate security responses across multiple vehicles.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If the in-vehicle network is isolated from external networks, then security against cyber-attacks is improved, but connectivity for advanced services such as map data updates and automatic driving is degraded
Solution Approach 1:
The system segments the network into in-vehicle network and external network portions, with only necessary components connected. The communication control device acts as a gateway that selectively allows authorized data transmission between networks, maintaining security while enabling required connectivity for services like map updates.
Solution Approach 2:
The communication control device serves as an intermediary between the in-vehicle network and external networks. It verifies authorization of data before allowing transmission, acting as a security barrier that enables connectivity while preventing unauthorized access and cyber-attacks.
2Adaptability or versatility
If the in-vehicle network is connected to external networks for connected car services, then adaptability and service capabilities are improved, but vulnerability to cyber-attacks increases
Solution Approach 1:
The system performs preliminary authorization verification of data before allowing it into the in-vehicle network. The communication control device checks data authorization in advance, preventing malicious data from entering the system and causing cyber-attacks while still allowing legitimate connected car services.
Solution Approach 2:
The communication control device acts as a protective intermediary that filters data between external networks and the in-vehicle network. It blocks unauthorized data transmission while permitting legitimate services, thereby enabling service capability while reducing cyber-attack vulnerability.
3Ease of operation
If security monitoring is performed only on individual vehicles, then detection simplicity is maintained, but the ability to respond to widespread cyber-threats is degraded
Solution Approach 1:
The system merges individual vehicle security monitoring with collective network-wide response capabilities. When an abnormal state is detected in one vehicle, the management server shares this information with other vehicles, enabling collective response to widespread threats while maintaining simple individual detection mechanisms.
Solution Approach 2:
The system implements feedback loops where security monitoring data from individual vehicles is fed back to a management server, which then distributes relevant security information back to the vehicle fleet. This enables simple individual detection to trigger collective response actions across multiple vehicles.
Data Source
AI summary
A vehicle security monitoring apparatus is capable of communicating with an in-vehicle network having a function of transmitting log data related to an operation state of an in-vehicle apparatus, and the vehicle security monitoring apparatus is configured to acquire the log data, and to detect an abnormal state in the in-vehicle network based on the acquired log data. The vehicle security monitoring apparatus is configured to estimate an influence range affected by the detected abnormal state, and to manage information indicating the estimated influence range.